Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pwfNBGH4tFkp_Ot6ldzQDNEsfnc.roa
File: pwfNBGH4tFkp_Ot6ldzQDNEsfnc.roa (raw, json)
Hash identifier: cbSTzIOgTKA4NTGVeXUx8xRRWdX/HwPMcnV9kMUFdWI=
Subject key identifier: A7:07:CD:04:61:F8:B4:59:29:FC:EB:7A:95:DC:D0:0C:D1:2C:7E:77
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A13F65D150521425125DBFBEB04816E61E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pwfNBGH4tFkp_Ot6ldzQDNEsfnc.roa
Signing time: Thu 15 Oct 2026 11:49:59 +0000
ROA not before: Thu 15 Oct 2026 11:49:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 163.5.54.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:65:d1:50:52:14:25:12:5d:bf:be:b0:48:16:e6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 15 11:49:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a707cd0461f8b45929fceb7a95dcd00cd12c7e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:49:4d:c4:8f:8c:ce:bc:da:97:e7:9d:05:
b6:14:12:f9:1b:ea:81:3e:5a:47:93:24:4e:51:e5:
d1:e9:50:32:97:db:06:be:82:a8:d5:ce:ee:b9:b3:
fc:66:ca:1d:1b:e0:e6:18:ff:10:c9:c9:28:40:d9:
b7:52:db:7d:09:59:87:81:34:a5:bf:8f:29:84:fe:
3a:41:4d:f0:91:aa:3f:fb:5c:d5:52:66:f6:b6:aa:
2f:9a:59:f3:9f:08:93:47:75:c3:b7:dd:98:24:ff:
ed:2f:44:7b:1a:14:b5:95:f4:31:67:b7:bc:c1:ff:
aa:c2:fa:2c:4f:44:a5:74:85:c9:c4:10:64:12:55:
e0:7a:ac:da:ca:91:d8:41:68:cb:87:a2:28:b1:bc:
3a:b0:67:80:88:55:35:42:27:70:f2:0b:29:49:1d:
64:a6:81:0a:7f:b4:01:53:20:35:19:67:55:12:ed:
80:79:b5:bf:eb:c7:d9:5c:19:d7:2c:ae:9b:2a:1a:
a6:af:e8:4a:77:ff:5c:2e:78:59:bc:3f:08:ba:a5:
f0:ee:d6:3f:02:76:97:ef:65:c9:c5:bd:9c:fa:82:
15:e7:b3:74:72:9c:21:92:30:3e:12:73:69:06:8b:
82:59:c9:2f:ed:81:2f:66:a6:12:3f:53:3d:30:71:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:CD:04:61:F8:B4:59:29:FC:EB:7A:95:DC:D0:0C:D1:2C:7E:77
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pwfNBGH4tFkp_Ot6ldzQDNEsfnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.54.0/24
163.5.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0e:3c:2e:2c:3f:eb:58:53:af:ee:c5:1d:28:67:c6:f3:04:
da:eb:64:eb:10:d4:ab:67:f6:8a:69:6d:4f:5e:89:0d:2e:73:
e2:38:b3:bf:82:69:35:2e:e1:d7:d8:b8:16:f9:0f:a2:75:34:
71:32:3b:3e:e2:39:62:dd:42:1c:5b:6c:cf:cb:29:42:2c:54:
55:1c:9d:7a:3c:a7:4c:93:b8:8f:b0:a8:55:ec:8e:9a:52:b6:
de:f1:69:7b:e5:6d:f5:d8:b0:07:d1:8e:65:3e:cb:b6:12:00:
c5:8b:6f:94:c8:58:74:5c:83:6a:93:23:6c:b3:65:32:a8:79:
d4:50:e9:86:98:99:7f:45:e2:f1:15:6b:32:21:c4:96:b8:97:
e5:cd:15:6f:c5:fb:18:0c:cf:62:6b:97:74:af:80:df:ad:84:
82:1e:b1:68:f5:da:af:0a:3e:3f:7d:9d:27:05:1b:24:b6:48:
60:86:50:ee:0d:19:b4:91:72:a7:2e:64:9d:16:fa:77:67:d1:
ee:c7:f0:58:c2:6b:84:41:34:3d:35:43:fa:22:99:e3:8b:ae:
b8:b6:c4:4b:f8:14:61:49:6d:0e:58:50:b5:7d:5f:d6:84:96:
20:3e:34:ee:b7:94:d7:f0:cf:8c:2a:e4:fb:70:77:3f:b8:ee:
d4:8f:d7:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE/ZdFQUhQlEl2/vrBIFuYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYxMDE1MTE0OTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzA3Y2QwNDYxZjhiNDU5MjlmY2ViN2E5NWRjZDAwY2QxMmM3ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WpJTcSPjM682pfnnQW2FBL5G+qB
PlpHkyROUeXR6VAyl9sGvoKo1c7uubP8ZsodG+DmGP8QyckoQNm3Utt9CVmHgTSl
v48phP46QU3wkao/+1zVUmb2tqovmlnznwiTR3XDt92YJP/tL0R7GhS1lfQxZ7e8
wf+qwvosT0SldIXJxBBkElXgeqzaypHYQWjLh6Iosbw6sGeAiFU1Qidw8gspSR1k
poEKf7QBUyA1GWdVEu2AebW/68fZXBnXLK6bKhqmr+hKd/9cLnhZvD8IuqXw7tY/
AnaX72XJxb2c+oIV57N0cpwhkjA+EnNpBouCWckv7YEvZqYSP1M9MHEv/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKcHzQRh+LRZKfzrepXc0AzRLH53MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvcHdmTkJHSDR0RmtwX090NmxkelFETkVzZm5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowU2AwQA
owXOMA0GCSqGSIb3DQEBCwUAA4IBAQCLDjwuLD/rWFOv7sUdKGfG8wTa62TrENSr
Z/aKaW1PXokNLnPiOLO/gmk1LuHX2LgW+Q+idTRxMjs+4jli3UIcW2zPyylCLFRV
HJ16PKdMk7iPsKhV7I6aUrbe8Wl75W312LAH0Y5lPsu2EgDFi2+UyFh0XINqkyNs
s2UyqHnUUOmGmJl/ReLxFWsyIcSWuJflzRVvxfsYDM9ia5d0r4DfrYSCHrFo9dqv
Cj4/fZ0nBRsktkhghlDuDRm0kXKnLmSdFvp3Z9Hux/BYwmuEQTQ9NUP6Ipnji664
tsRL+BRhSW0OWFC1fV/WhJYgPjTut5TX8M+MKuT7cHc/uO7Uj9cu
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:46 2026 by rpki-client